ZTAPExtractFields

Extracts ZTAP fields into a format parsable to grab as indicators

Details

ID	`ZTAPExtractFields`
Language	python
From Version	6.0.0
Docker Image	`demisto/python3:3.12.13.10116658`
Tags	ztap transformer

README

Extracts ZTAP fields into a format parsable to grab as indicators

Script Data

Name	Description
Script Type	python3
Tags	ztap, transformer
Cortex XSOAR Version	6.0.0

Inputs

Argument Name	Description
value	The input trigger events from the ZTAP api

Outputs

There are no outputs for this script.

Source

ZTAPExtractFields.py ZTAPExtractFields_test.py ZTAPExtractFields.yml

Download History Raw

import json


def util_load_json(path):
    with open(path, encoding="utf-8") as f:
        return json.loads(f.read())


def test_extract_fields():
    from ZTAPExtractFields import extract_fields

    events = util_load_json("test_data/event.json")
    output = extract_fields(events)

    mock_markdown_result = util_load_json("test_data/output.json")
    assert output == mock_markdown_result